imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:f0:47:4b:53:e7:cd:f9:a9:2f:b3:36:95:51:e7:99 was issued on by GlobalSign nv-sa.

With 119 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f0:47:4b:53:e7:cd:f9:a9:2f:b3:36:95:51:e7:99
Serial Number (int): 2576825260994812712238588387721865113
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d8:9e:54:3d:2d:9e:ce:11:7a:3c:71:59:1c:68:ac:42:a9:4e:b8:02
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): a9:04:ef:b3:eb:fc:bf:4d:db:f4:ff:5e:1c:a2:38:f1:a1:91:85:6c
Fingerprint (sha256): 92:96:35:23:6c:99:7d:64:23:0c:93:15:73:ae:4b:f3:57:52:6e:d0:6d:30:e0:07:74:5d:29:44:43:7b:e5:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

119

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reservations.villarspalace.ch
accounts-gcp.int.sabre.com
apigw.israir.co.il
sudanair-api-cert-ase1.ezycommerce.sabre.com
reservations.innsofaurora.com
www.skypass.co.il
opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com
webouprod.avri.as.prod.asc.sabre.com
www.1p01.usc1.int.planning-optimization.sabre.com
airjapan-ext-api-cert-ase1.ezycommerce.sabre.com
manta-api-ase1.ezycommerce.sabre.com
opscomm.e9.prod.sabre.com
am.reaccom-manager.cert.sabre.com
tripmaster.co.il
reservations.grandbeachhotel.com
travelbank-ngp.int.sabre.com
skyexpress-ext-api-cert-ew3.ezycommerce.sabre.com
reservations.carlton.co.il
u0-ro.avro.cert.aws.sabre.com
aerok-ext-api-ase1.ezycommerce.sabre.com
asreporting-us-central.cert.sabre.com
sud.res.radixxcert.com
reservations.vibehotels.com
bedrooms.sohohouse.com
webarcert.avri.as.cert.asc.sabre.com
reserve.cambridgebeaches.com
bon.res.radixxhost.com
apigw.caspitours.co.il
gettours.co.il
reservations.hotelemeline.com
thepalmshotel.mynuvola.com
caw-f9.cert.sabre.com
caw-f9.prod.sabre.com
ey.reaccom-manager.cert.sabre.com
sudanair-api-ase1.ezycommerce.sabre.com
reservation.marinobeach.com
sud.dcs.radixxcert.com
airjapan-api-cert-ase1.ezycommerce.sabre.com
va.reaccom-manager.cert.sabre.com
bon.app.radixxhost.com
redapp-examples-webservice.cert.sabre.com
cps.stc.sabre.com
documents-svc.sabre.com
caw-nk.cert.sabre.com
reservations.sociallivingcollection.com
skypass.co.il
fccs.sabre.com
cert.documents-svc.sabre.com
documents.sabre.com
travelextras-ngp.int.sabre.com
6s.reaccom-manager.cert.sabre.com
opsmobile.amm.sv.as.cert.asc.sabre.com
imperva.com
ws.reaccom-manager.cert.sabre.com
reservations.villarslodge.ch
sudanair-ext-api-ase1.ezycommerce.sabre.com
opsmobile.mq.as.cert.asc.sabre.com
mld.appota.radixxhost.com
az.reaccom-manager.cert.sabre.com
cert.cps.stc.sabre.com
bon.appota.radixxhost.com
sudanair-ext-api-cert-ase1.ezycommerce.sabre.com
www.gettours.co.il
www.vc01.usc1.int.planning-optimization.sabre.com
webcdhprod.as.prod.asc.sabre.com
mld.res.radixxhost.com
mld.dcs.radixxhost.com
lvrlakebuenavista.mynuvola.com
opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com
reservations.hoteldanieli.com
manta-api-cert-ase1.ezycommerce.sabre.com
elbit.sabre.co.il
apigw.ophirtours.co.il
reservations.tfehotels.com
apigw.nehoratours.co.il
beta.reztrack.com
reservations.villarsvictoria.ch
reservation.lamaisonfavart.com
reservations.harvestinn.com
crouter-ngp.int.sabre.com
opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com
reservations.showboathotelac.com
weboucert.avri.as.cert.asc.sabre.com
su.reaccom-manager.cert.sabre.com
u0-ro-c1.avro.cert.aws.sabre.com
b6.reaccom-manager.cert.sabre.com
reservations.lodgeatbodegabay.com
reservations.theinterlude.com.au
admin-cert-ew3.ezycommerce.sabre.com
redapp-examples-webservice.int.sabre.com
manta-ext-api-cert-ase1.ezycommerce.sabre.com
reservations.hotelderek.com
webtest.x0.ix.cert.sabre.com
la.reaccom-manager.cert.sabre.com
bon.dcs.radixxhost.com
webarprod.avri.as.prod.asc.sabre.com
mondriancondesa.mynuvola.com
skyexpress-api-cert.ezypayment.sabre.com
skyexpress-ext-api-ew3.ezycommerce.sabre.com
manta-ext-api-ase1.ezycommerce.sabre.com
mld.app.radixxhost.com
wcp-int.getthere.net
airjapan-api-ase1.ezycommerce.sabre.com
hotels.cert.havail.sabre.com
prd.eticket.radixxhost.com
admin-ew3.ezycommerce.sabre.com
skyexpress-api-cert-ew3.ezycommerce.sabre.com
reservations.soneva.com
aerok-ext-api-cert-ase1.ezycommerce.sabre.com
book.bunkhousehotels.com
airjapan-ext-api-ase1.ezycommerce.sabre.com
mon.app.radixxhost.com
sud.appota.radixxcert.com
sud.app.radixxcert.com
skyexpress-api-ew3.ezycommerce.sabre.com
demo.avfo.as.cert.asc.sabre.com
as.reaccom-manager.cert.sabre.com
commandcenter-ngp.cert.sabre.com
sudanair-api-cert.ezypayment.sabre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bANYwqMl8Eh2fxoAtO6
8OQodYuGwsUzIaHocvpFhkGJqyKjrdPh8/zDJhhoYb8WSoW2ACurZy9oZUDs8PLD
EjulMDM2OxSJVQRpWrhDjvlPlml0XI8M7Dk4EIRt/Y1bK9Ai70aFd34rLUc7wdXh
qZoLQuKMn7K3MD67UVR84ggiaIHArp+BYFYBabYOJaT0Nqv59FzObSh3T25N4/BA
wBq0mZRJB+ozXZkEcL1Bdmc1c2DkNSve2Md0ICt8ZPKTxIbKhrgY20y9lEAinfKS
c6WPogmsesntjjyhnuYZDLTpkeRjSLz7LMndXgbyaDanQC5EfJEpUKkKnKAs3Ueu
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2576825260994812712238588387721865113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 19:42:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 19:42:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27985480018555399402613011829797998182046304481983034071235585588160164633350614069837951484927545898544918962017332048382054229892099594825636010161752873272250182296045766457682031330444075296829974969701630305766777832116078868653717887853562010450751754672978957454778958121197399438506214643136831422771806825940380825531847556490088082039721605528558641887537561098289100211790238277853425666920314702756429399367132059123055517660776993608063993757296679577687740436525405068525480613258240777147255609668397232343895440077263236626777567218069093278015298719615324948142129691956053947271019103960908178107991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3861 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarspalace.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-gcp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.israir.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.innsofaurora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skypass.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.e9.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webouprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1p01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opscomm.e9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripmaster.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.grandbeachhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelbank-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.carlton.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asreporting-us-central.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.res.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.vibehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedrooms.sohohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarcert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.cambridgebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.caspitours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelemeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepalmshotel.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-f9.prod.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.marinobeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.dcs.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents-svc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caw-nk.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.sociallivingcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypass.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccs.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.documents-svc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelextras-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6s.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarslodge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.mq.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.cps.stc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.appota.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vc01.usc1.int.planning-optimization.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcdhprod.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.res.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvrlakebuenavista.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.sv.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hoteldanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbit.sabre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.ophirtours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.tfehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw.nehoratours.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.reztrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.villarsvictoria.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservation.lamaisonfavart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.harvestinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crouter-ngp.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmobile.eu-west-1.amm.fi.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.showboathotelac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboucert.avri.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0-ro-c1.avro.cert.aws.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.lodgeatbodegabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.theinterlude.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redapp-examples-webservice.int.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.hotelderek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.x0.ix.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bon.dcs.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webarprod.avri.as.prod.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondriancondesa.mynuvola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-ext-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manta-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mld.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int.getthere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.cert.havail.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.eticket.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-cert-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.soneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerok-ext-api-cert-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.bunkhousehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airjapan-ext-api-ase1.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.app.radixxhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.appota.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sud.app.radixxcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyexpress-api-ew3.ezycommerce.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.avfo.as.cert.asc.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as.reaccom-manager.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commandcenter-ngp.cert.sabre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanair-api-cert.ezypayment.sabre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d89e543d2d9ece117a3c71591c68ac42a94eb802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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